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We claim 
Claim 1 

method for automatically generating a network subnet configuration by monitoring IP 
Address Resolution Protocol (ARP) frames on the network and building and maintaining a table 
including^ list of leamed subnets, thejorts associated with each of the learned subnets and a 
mask assocmted with each leamed subnet for identifying hosts belonging to the subnet, said 
method inclining the process steps set forth below: 

establishing and maintaining in memory a table of leamed IP subnets, each of which 
includes a characterizing leamed subnet address, a mask for identifying the IP address bits 
common to all rnbmbers of the leamed subnet and the forwarding domain of the subnet; 
interceptinjg IP ARP frames; 

extracting t\e from and to IP addresses from an intercepted IP ARP frame: 



examining the table of leamed subnets to determine if the extracted IP addresses belong 
to one or more of the leamed subnets; 

if neither IP adtress belongs to a leamed subnet, defining a new leamed IP subnet address 
for inclusion in the tablastored in the memory from the common elements in the prefix of the IP 
addresses, including the pbrt over which the ARP frame was received in the forwarding domain 
of the leamed subnet and generating a mask which identifies all of the common elements in the 
prefixes of both IP address^. 



Claim 2 

The method set forth irl claim 1 including the following process steps: 
if only one IP address belongs to a previously leamed subnet, examine the subnet mask 

and modify it include all the cordon elements in the prefix of both IP addresses in the ARP 

frame; and, 

add the port over which th^ARP frame was received to the port list associated with the 
leamed IP subnet if it was not alreadV in the list of associated ports. 
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Claims 

Th^method set forth in claim 2 including the following process steps: 

if theuP addresses in the received ARP frame belong to different learned subnets: 
combime the learned subnets to form a new learned subnet 

create amew mask which includes the common prefix IP address elements of both host IP 
addresses engarad in the ARP frame; and, 

add the p&rt over which the IP ARP frame was received to the combined forwarding 
omains of the previously identified subnets if that port was not included therein. 

Claim 4 \ 

A method forlutomatically generating a network subnet configuration by monitoring IP 
Address Resolution Protocol (ARP) frames on the network and building and maintaining a table 
including a list of leam^ subnets, the ports associated with each of the learned subnets and a 
mask associated with eacA learned subnet for identifying hosts belonging to the subnet, said 
method including the proc&s steps set forth below: 

maintaining in memOTy a table of learned IP subnet addresses, each of which includes a 
characterizing address, a masMor the IP address bits common to all members of the learned 
subnet and the forwarding donmin of the subnet; 

intercepting IP ARP frames; 

extracting the from and tcMP addresses from an intercepted IP ARP frame: 
examining the table of learned subnets to determine if the extracted IP addresses belong 
to one or more of the learned subnet; 

if neither IP address belongs m a learned subnet, defining a new learned IP subnet address 
for inclusion in the table stored in the memory from the common elements in the prefix of the IP 
addresses, including the port over whicmthe ARP frame was received in the forwarding domain 
of the learned subnet and generating a mask which identifies all of the common elements in the 
prefixes of both IP addresses; \ 
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ifWly one IP address belongs to a learned subnet, examine the subnet mask and modify it 
if necessaw to only include all the common elements in the prefix of both IP addresses and add 
the port ovhr which the ARP frame was received to the port list associated with the learned IP 
subnet if it w^ not already in the list of associated ports; and, 

if the IR addresses belong to different leamed subnets the learned subnets are combined to 
form a new leamed subnet with a mask which includes both host IP addresses in the leamed 
subnet and add tBe port over which the IP ARP frame was received to the combined forwarding 
domains of the previously identified subnets if that port was not included therein. 

Claim 5 

The method sit forth in any one of claims 1-4 including the following process steps: 
upon establishmg a new leamed subnet starting a split interval timer; 
upon receipt ofWh IRP frame belonging to the subnet generating a split potential value 
for the leamed subnet wnich is related to the number of common bits in the from and to IP 
addresses in the received^RP frame and replacing a previously generated split potential value if 
the current value exceed atereviously generated value; and, 

at the expiration of me split interval, splitting the leamed subnet if the split potential 
exceeds a predetermined vame. 
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Claim 6 

The method set forth in claim 5 in which the forwarding domain of the split leamed 
subnet includes the port over which the ARP frame causing the last split potential was received. 
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